General
- Target tmplabbusq0
- Size 22.5MB
- Sample260602-tap6aahw3x
- SHA256 01812a0f68ccb64e1d1bf4dd7f329c2373ea7b7ba831a386d80f3e1b205fa400
- MD5 37faffbf9559840ab26c368380015b7e
- SHA1 45751e456f6f6afb84ba4fb87566b29a3cbd451f
- SHA512 2a14dd1abf5dbad4b308adb149fe89b9200a55c78ccef23b1bf384ed832e49d760c22f13b7e9c8235dce9b0b4c93c2b6308a1faa4f4544d476bf6751f32a4315
- SSDEEP 49152:j7hbzjCxbhqHlp4lOrN0uRh+YfTzeYzYTvri+8mem3NQ/2bMGscL3qtAOsgecEig:S
- TLSH T1AF37A20DAEF71091A923317C8FAF640AB6748017190ADD143D8DA3945FA953867FEFE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
tmplabbusq0.js
Resource
win10ltsc2021-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmplabbusq0.js
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmplabbusq0.js
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target tmplabbusq0
- Size 22.5MB
- SHA256 01812a0f68ccb64e1d1bf4dd7f329c2373ea7b7ba831a386d80f3e1b205fa400
- MD5 37faffbf9559840ab26c368380015b7e
- SHA1 45751e456f6f6afb84ba4fb87566b29a3cbd451f
- SHA512 2a14dd1abf5dbad4b308adb149fe89b9200a55c78ccef23b1bf384ed832e49d760c22f13b7e9c8235dce9b0b4c93c2b6308a1faa4f4544d476bf6751f32a4315
- SSDEEP 49152:j7hbzjCxbhqHlp4lOrN0uRh+YfTzeYzYTvri+8mem3NQ/2bMGscL3qtAOsgecEig:S
- TLSH T1AF37A20DAEF71091A923317C8FAF640AB6748017190ADD143D8DA3945FA953867FEFE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.